mitomzao.cc_hyber.exe
Classification: Malicious
mitomzao.cc_hyber.exe is a ransomware (Windows executable). Detected by 52 antivirus engines. Reported by Hybrid-Analysis and Triage, last seen 2026-10-18.
Detection summary
- 52 antivirus detections
- 0 IDS alerts
- 0 processes observed
- 2 contacted hosts
- 9 DNS requests
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2026-10-18 04:45:04 | 2026-10-18 04:45:04 | malicious-activity | |
| Suspicious Sample | Triage | 2026-10-18 04:24:57 | 2026-10-18 04:24:57 | anomalous-activity |
Tags
ransomware defense_evasion discovery evasion execution impact persistence privilege_escalation spyware stealer trojanSample information
- Filenames
- mitomzao.cc_hyber.exe, sample-9c12e5f78385.exe
- File type
- PE32 executable for MS Windows 4.00 (GUI), Intel i ...
- MD5
b3b7ca37a049d6dbcd09a3685b3e2d92- SHA-1
54faa7a4a46a088dc1bfa43c30881a48dd39b709- SHA-256
9c12e5f783851f08a6efdd0dff69d94b476d3931931e973cf1e3b386d1922b3f- First indexed
- 2026-10-18 04:24:57
- Last updated
- 2026-10-18 04:56:24
Antivirus detections
| Engine | Detection |
|---|---|
| APEX | Malicious |
| AVG | Win32:MalwareX-gen [Misc] |
| AhnLab-V3 | Ransomware/Win.Filecoder.C5865429 |
| Antiy-AVL | Trojan/MSIL.Lazy |
| Arcabit | Trojan.Ransom.HiddenTears.1 |
| Avast | Win32:MalwareX-gen [Misc] |
| Avira | TR/Dropper.Gen |
| BitDefender | Gen:Heur.Ransom.HiddenTears.1 |
| Bkav | W32.Malware.F52563E6 |
| CTX | exe.ransomware.hiddentears |
| CrowdStrike | win/malicious_confidence_100% (D) |
| Cylance | Unsafe |
| DeepInstinct | MALICIOUS |
| DrWeb | Trojan.Siggen32.34077 |
| ESET-NOD32 | MSIL/Agent.YJE trojan |
| Elastic | malicious (high confidence) |
| Emsisoft | Gen:Heur.Ransom.HiddenTears.1 (B) |
| F-Secure | Trojan.TR/Dropper.Gen |
| Fortinet | MSIL/Agent.EGC!tr |
| GData | Gen:Heur.Ransom.HiddenTears.1 |
| Detected | |
| Ikarus | Trojan.MSIL.Agent |
| K7AntiVirus | Trojan ( 700000201 ) |
| K7GW | Trojan ( 700000201 ) |
| Kaspersky | HEUR:Trojan-Ransom.MSIL.RDCry.gen |
| Malwarebytes | Ransom.FileCryptor |
| MaxSecure | Trojan.Malware.121218.susgen |
| McAfeeD | Real Protect-LS!B3B7CA37A049 |
| MicroWorld-eScan | Gen:Heur.Ransom.HiddenTears.1 |
| Microsoft | Ransom:MSIL/FileCoder.MX!MTB |
| NANO-Antivirus | Trojan.Win32.Ransom.lkaiqk |
| Panda | Trj/GdSda.A |
| Rising | Ransom.Agent!1.129F5 (CLASSIC) |
| Sangfor | Suspicious.Win32.Save.a |
| SentinelOne | Static AI - Malicious PE |
| Skyhigh | Ransomware-IFV!B3B7CA37A049 |
| Sophos | Mal/MSIL-AX |
| Symantec | ML.Attribute.HighConfidence |
| TACHYON | Trojan/W32.DN-Agent.50688.DO |
| Tencent | Trojan-Ransom.MSIL.RDCry.16003722 |
| Trapmine | malicious.high.ml.score |
| TrellixENS | Ransomware-IFV!B3B7CA37A049 |
| TrendMicro | Ransom_CRYPTEAR.SMI1 |
| TrendMicro-HouseCall | Ransom_CRYPTEAR.SMI1 |
| VBA32 | Trojan.MSIL.DelShad.Heur |
| VIPRE | Gen:Heur.Ransom.HiddenTears.1 |
| Varist | W32/Hiddentear.A!Eldorado |
| VirIT | Trojan.Win32.GenusT.FSRB |
| Webroot | Win.Ransomware.Hiddentear |
| Zillya | Trojan.AgentGen.Win32.113 |
| ZoneAlarm | Mal/MSIL-AZ |
| huorong | Ransom/LockFile.kg |
Network contacts
DNS requests
emotet.com i2p2.de malware.wicar.org mitomzao.cc ryuk.com torproject.org trickbot.com wannacry-decryptor.com www.zeltser.com